Token Storage Options And Patterns
In this article we will have an overview of what are our options for storing tokens on public clients such as a Single Page Application (SPA). We will consider different things mostly in the context of access tokens and OAuth. Token-Aware Client Web ...
Responses
Markdown supported · ⌘↵ to post
Warren Parad
CTO Rhosys
Adding this additional point of failure here doesn't seem to generate meaningful value, since you can accomplish the same thing by storing the access token as an HttpOnly cookie. As a matter of fact, this is exactly how Authress protects tokens, with the added benefit of no additional services in the middle.